CVE-2006-4668

CVE-2006-4668 describes an XSS in Rob Hensley AckerTodo 4.0. The vulnerability resides in index.php where the task_id parameter used in an edit_task command can be exploited by remote attackers to inject arbitrary web script or HTML. Public references confirm the affected component as AckerTodo 4...

CVE-2006-4633

index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page parameter...

CVE-2006-4634

CVE-2006-4634: XSS in VBZooM’s index.php via the UserID parameter. Affected: VBZooM (Web app); vulnerable component: index.php. Root cause: improper handling of user-supplied UserID enabling injection of script/HTML. Documentation confirms vulnerability description; no concrete remediation or pat...

CVE-2006-4634

Cross-site scripting XSS vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the UserID parameter, a different vector than CVE-2006-1133 and CVE-2005-2441...

CVE-2006-4633

index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page parameter...

MyABraCaDaWeb <= 1.0.3 (base) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= MyABraCaDaWeb = 1.0.3 base Remote File Include Vulnerabilities ================================================================= ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ----...

mkportalXSS-M11.txt

xxs in MKPortal M1.1 Rc1 info: file:index.php google======MKPortal M1.1 Rc1 ©2003-2005 Exp: http://www.sitename.com/index.php?ind="alert1; -------------------------------------- By Crackman Thank to all friend in www.lezr.com/vb...

CVE-2006-4601

SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

vbzoom.txt

vbzoom ==== index.php info: file:index.php thank to www.lezr.com/vb google ====== powered by vbzoom inurl:index.php?UserID= Exp: http://traget/path/index.php?UserID="alert1; =================================== by Crackman...

CVE-2006-4605

The CVE describes a PHP remote file inclusion vulnerability in Longino Jacome php-Revista 1.1.2, exploitable via the adodb parameter in index.php, allowing remote attackers to execute arbitrary PHP code. The NVD entry records a CVSS v2 base score of 7.5 (HIGH) with network attack vector and low a...

AckerTodo 4.0 - index.php Cross-Site Scripting

AckerTodo 4.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19894/info AckerTodo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue would allow an attacker to steal cookie-based...

CVE-2006-4593

Cross-site scripting XSS vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-4588

vtiger CRM 4.2.4, and possibly earlier, allows remote attackers to bypass authentication and access administrative modules via a direct request to index.php with a modified module parameter, as demonstrated using the Settings module...

CVE-2006-4593

Cross-site scripting XSS vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-4588

vtiger CRM 4.2.4 (and possibly earlier) contains an authentication-bypass vulnerability that lets remote attackers access administrative modules by issuing a direct request to index.php with a modified module parameter, demonstrated via the Settings module. Root cause: improper validation of the ...

CVE-2006-4543

Cross-site scripting XSS vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the 1 game parameter in players mode, the 2 weapon parameter in weaponinfo mode, the 3 st parameter in search mode, the 4 action parameter in actioninfo mode, and...

CVE-2006-4543

CVE-2006-4543 is an XSS vulnerability in HLStats 1.34 (index.php). The issue allows remote attackers to inject arbitrary script or HTML via specific parameters across multiple modes: (1) game in players mode, (2) weapon in weaponinfo mode, (3) st in search mode, (4) action in actioninfo mode, and...

GrapAgenda 0.1 (page) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================= GrapAgenda 0.1 page Remote File Include Vulnerability ======================================================= Kurdish Security Advisory Script : GrapAgenda Site :...

XXS in Powered by vbzoom

vbzoom ==== index.php info: file:index.php thank to www.lezr.com/vb google ====== powered by vbzoom inurl:index.php?UserID= Exp: http://traget/path/index.php?UserID="scriptalert1;/script =================================== by Crackman...

ezportal.txt

:: Ezportal/Ztml v1.0 Multiple vulnerabilities :: ------------------------------------------------ Software : Ezportal/Ztml Website : http://www.ztml.org Bug Discover : Hessam-x / www.hessamx.net I. Multiple Cross Site Scripting Vulnerabilities -------------------------------------------------...